154.160.66.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Ghana

Internet Service Provider: Scancom Limited

Hostname: unknown

Organization: unknown

Usage Type: Mobile ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Invalid user eyd from 154.160.66.42 port 43646	2020-03-29 07:39:06
attackspambots	Invalid user mongodb from 154.160.66.42 port 34116	2020-03-20 16:32:57
attackspambots	Mar 19 21:36:03 game-panel sshd[10011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.160.66.42 Mar 19 21:36:05 game-panel sshd[10011]: Failed password for invalid user wocloud from 154.160.66.42 port 51690 ssh2 Mar 19 21:41:51 game-panel sshd[10355]: Failed password for root from 154.160.66.42 port 41898 ssh2	2020-03-20 05:52:41
attackspam	Mar 4 18:49:36 jane sshd[31521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.160.66.42 Mar 4 18:49:39 jane sshd[31521]: Failed password for invalid user mansi from 154.160.66.42 port 36844 ssh2 ...	2020-03-05 02:34:18
attackbots	Feb 29 23:15:19 * sshd[28348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.160.66.42 Feb 29 23:15:21 * sshd[28348]: Failed password for invalid user svnuser from 154.160.66.42 port 35968 ssh2	2020-03-01 06:34:18

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.160.66.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21391
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.160.66.42.			IN	A

;; AUTHORITY SECTION:
.			525	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022901 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 01 06:34:15 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 42.66.160.154.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.66.160.154.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
195.9.121.78	attack	Helo	2020-04-20 16:06:56
140.143.16.158	attack	Unauthorized connection attempt detected from IP address 140.143.16.158 to port 9200 [T]	2020-04-20 16:24:52
49.235.26.143	attackbotsspam	Unauthorized connection attempt detected from IP address 49.235.26.143 to port 12829 [T]	2020-04-20 16:21:46
134.209.208.159	attack	Port scan(s) denied	2020-04-20 16:28:29
167.99.231.70	attack	Apr 19 22:16:27 php1 sshd\[26805\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.231.70 user=root Apr 19 22:16:28 php1 sshd\[26805\]: Failed password for root from 167.99.231.70 port 39526 ssh2 Apr 19 22:20:49 php1 sshd\[27167\]: Invalid user docker from 167.99.231.70 Apr 19 22:20:49 php1 sshd\[27167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.231.70 Apr 19 22:20:51 php1 sshd\[27167\]: Failed password for invalid user docker from 167.99.231.70 port 56798 ssh2	2020-04-20 16:34:36
129.204.15.121	attackspambots	Invalid user bo from 129.204.15.121 port 52068	2020-04-20 16:14:52
174.223.4.235	attack	Fraudulent login attempt; screenshot available upon request	2020-04-20 16:02:02
103.245.181.2	attackbotsspam	Apr 20 06:58:55 host sshd[62109]: Invalid user couchdb from 103.245.181.2 port 58568 ...	2020-04-20 16:08:11
198.108.66.96	attack	Unauthorized connection attempt from IP address 198.108.66.96 on Port 3306(MYSQL)	2020-04-20 16:10:35
173.252.183.120	attackbotsspam	Apr 20 08:18:50 srv01 sshd[16342]: Invalid user hi from 173.252.183.120 port 54514 Apr 20 08:18:50 srv01 sshd[16342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.252.183.120 Apr 20 08:18:50 srv01 sshd[16342]: Invalid user hi from 173.252.183.120 port 54514 Apr 20 08:18:52 srv01 sshd[16342]: Failed password for invalid user hi from 173.252.183.120 port 54514 ssh2 Apr 20 08:20:55 srv01 sshd[16496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.252.183.120 user=root Apr 20 08:20:57 srv01 sshd[16496]: Failed password for root from 173.252.183.120 port 2003 ssh2 ...	2020-04-20 15:54:17
49.88.112.111	attackspambots	SSH/22 MH Probe, BF, Hack -	2020-04-20 16:11:53
222.186.30.167	attackbots	2020-04-20T01:05:31.231764homeassistant sshd[27683]: Failed password for root from 222.186.30.167 port 60261 ssh2 2020-04-20T08:22:32.637440homeassistant sshd[5656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167 user=root ...	2020-04-20 16:32:39
180.76.177.237	attackspambots	Apr 20 08:20:31 legacy sshd[5517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.177.237 Apr 20 08:20:33 legacy sshd[5517]: Failed password for invalid user fq from 180.76.177.237 port 34886 ssh2 Apr 20 08:25:26 legacy sshd[5651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.177.237 ...	2020-04-20 16:29:42
167.114.24.184	attackspam	Automatic report - Banned IP Access	2020-04-20 16:11:04
186.232.136.240	attackspambots	(imapd) Failed IMAP login from 186.232.136.240 (BR/Brazil/fastnetwork.136.240.host.fastnetwork.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 20 12:08:25 ir1 dovecot[566034]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=186.232.136.240, lip=5.63.12.44, session=	2020-04-20 15:59:36

Recently Reported IPs

154.51.67.185	126.88.55.173	111.1.8.107	177.38.152.158
106.1.188.234	138.151.136.67	101.86.60.122	93.170.216.229
87.237.238.157	86.213.136.19	86.100.93.85	86.99.140.83
80.14.86.3	78.166.118.157	72.89.81.207	66.229.19.7
221.183.209.235	62.28.93.125	9.95.22.232	239.70.202.58